Controlled range and payload for unmanned vehicles, and associated systems and methods

• US 10,501,178 B2
• Filed: 12/04/2017
• Issued: 12/10/2019
• Est. Priority Date: 11/15/2011
• Status: Active Grant

• Current Assignee: Insitu Incorporated (The Boeing Co.)
• Original Assignee: Insitu Incorporated (The Boeing Co.)
• Inventors: Knapp, Jeffrey H., Tasker, David, Viviani, Gary Lee
• Primary Examiner(s): Jeanglaude, Gertrude Arthur
• Application Number:
  US15/831,086
• Publication Number:
  US 20180265195A1
• Time in Patent Office: 736 Days
• Field of Search: 701 2
• CPC Class Codes: B64C 19/00 Aircraft control not otherwise provided for
• CPC Class Codes: B64U 2101/60 for transporting passengers; for transporting goods other than weapons
• CPC Class Codes: B64U 2201/10 autonomous, i.e. by navigating independently from ground or air stations, e.g. by using inertial navigation systems [INS]
• CPC Class Codes: B64U 2201/20 Remote controls
• CPC Class Codes: B64U 70/83 using parachutes, balloons or the like
• CPC Class Codes: G05D 1/0055 with safety arrangements
• CPC Class Codes: G05D 1/106 Change initiated in response to external conditions, e.g. avoidance of elevated terrain or of no-fly zones
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 50/18 Legal services
• CPC Class Codes: G06Q 50/26 Government or public services business processes related to the transportation industry G06Q50/40
• CPC Class Codes: Y10T 29/49826 Assembling or joining

Abstract

The presently disclosed technology is directed generally to unmanned vehicle systems and methods configured to satisfy a first set of export control regulations, such as those within the jurisdiction of one government entity or international body (e.g., the U.S. Department of Commerce) without falling within the purview of a second set of export control regulations, such as export control regulations within the jurisdiction of another government entity or international body (e.g., the U.S. Department of State). Through limited range of operation, limited payload types, limited capabilities, and tamper-proof or tamper-resistant features, embodiments of the unmanned vehicle system are designed to fall within the purview and under control of one agency and not within the purview and under control of another agency.

Claims

1. A method, performed by a computing system of a vehicle, for ensuring that the vehicle complies with specified regulatory requirements throughout operation of the vehicle, the method comprising:

storing an indication of an initial specification of the vehicle, the initial specification of the vehicle specifying initial configuration information and an identification for at least one tamper-resistant trusted component of the vehicle, wherein the initial configuration of the vehicle is in compliance with the specified regulatory requirements;

querying, via an encrypted data interface and through a communication network, a plurality of trusted components of the vehicle for current configuration, wherein the plurality of trusted components include the at least one tamper-resistant trusted component;

determining whether a current configuration of the vehicle is in compliance with the specified regulatory requirements based, at least in part, on a change in configuration associated with at least one of the plurality of trusted components since the initial specification was stored; and

in response to determining that the current configuration of the vehicle is in compliance with the specified regulatory requirements, granting one or more requests to operate the vehicle.

2. The method of claim 1, further comprising:

detecting the change in configuration associated with at least one of the plurality of the trusted components.

3. The method of claim 2 wherein detecting the change comprises detecting that the at least one of the plurality of trusted components is not present.

4. The method of claim 2 wherein detecting the change comprises determining a difference in value between the current configuration of the at least one of the plurality of trusted components and the corresponding initial configuration of the at least one of the plurality of trusted components.

5. The method of claim 4 wherein determining whether the current configuration of the vehicle is in compliance with the specified regulatory requirements is further based on whether the difference falls within a specified acceptable range.

6. The method of claim 1, further comprising receiving the one or more requests to operate the vehicle.

7. The method of claim 1 wherein the one or more requests to operate the vehicle includes at least one of a request to change speed, a request to modify a planned route, or a request to change direction.

8. The method of claim 1, further comprising denying one or more requests to operate the vehicle in response to determining that the current configuration of the vehicle is not in compliance with the specified regulatory requirements.

9. The method of claim 1 wherein determining whether the current configuration of the vehicle is in compliance with the specified regulatory requirements is further based on a relationship between the plurality of trusted components and trusted components that must be present in accordance with the specified regulatory requirements.

10. A non-transitory computer readable medium storing content that, when executed by one or more processors, causes the one or more processors to perform actions for ensuring that a vehicle complies with specified regulatory requirements, the actions comprising:

storing an indication of an initial specification of the vehicle, the initial specification of the vehicle specifying initial configuration information and an identification for at least one tamper-resistant trusted component of the vehicle, wherein the initial configuration of the vehicle is in compliance with the specified regulatory requirements;

querying, via an encrypted data interface and through a communication network, a plurality of trusted components of the vehicle for current configuration information associated with individual trusted components, wherein the plurality of trusted components include the at least one tamper-resistant trusted component; and

determining whether the current configuration of the vehicle is in compliance with the specified regulatory requirements based, at least in part, on a change in configuration associated with at least one of the plurality of trusted components since the initial specification was stored; and

in response to determining that the current configuration of the vehicle is in compliance with the specified regulatory requirements, granting one or more requests to operate the vehicle.

11. The computer readable medium of claim 10 wherein the plurality of trusted components include all components installed on the vehicle.

12. The computer readable medium of claim 10 wherein the actions further comprise receiving the one or more requests to operate the vehicle.

13. The computer readable medium of claim 10 wherein the actions further comprise denying one or more requests in response to determining that the current configuration of the vehicle is not in compliance with the specified regulatory requirements.

14. The computer readable medium of claim 10 wherein the actions further comprise rendering the vehicle inoperable in response to determining that the current configuration of the vehicle is not in compliance with the specified regulatory requirements.

15. A system, comprising:

one or more processors; and

at least a memory storing content that, when executed by the one or more processors, causes the one or more processors to;

store an indication of an initial specification of a vehicle, the initial specification of the vehicle specifying initial configuration information and an identification for at least one tamper-resistant trusted component of the vehicle, wherein the initial configuration of the vehicle is in compliance with specified regulatory requirements,

query, via an encrypted data interface and through a communication network, a plurality of trusted components of the vehicle for current configuration information associated with individual trusted components, wherein the plurality of trusted components include the at least one tamper-resistant trusted component, determine whether the current configuration of the vehicle is in compliance with the specified regulatory requirements based, at least in part, on a change in configuration associated with at least one of the plurality of trusted components since the initial specification was stored, and

in response to determining that the current configuration of the vehicle is not in compliance with the specified regulatory requirements, deny one or more requests to operate the vehicle.

16. The system of claim 15 wherein the content further causes the one or more processors to detect the change in configuration associated with at least one of the plurality of trusted components.

17. The system of claim 16 wherein detecting the change comprises detecting that the at least one of the plurality of trusted components is not present.

18. The system of claim 16 wherein detecting the change comprises determining a difference in value between the current configuration of the at least one of the plurality of trusted components and the corresponding initial configuration of the at least one of the plurality of trusted components.

19. The system of claim 18 wherein determining whether the current configuration of the vehicle is in compliance with the specified regulatory requirements is further based on whether the difference falls within a specified acceptable range.

20. The system of claim 15 wherein determining whether the current configuration of the vehicle is in compliance with the specified regulatory requirements is further based on a relationship between the plurality of trusted components and trusted components that must be present in accordance with the specified regulatory requirements.